General

  • Target

    723f46d7354ada6c17f2dccd6b4fd3cd_JaffaCakes118

  • Size

    519KB

  • Sample

    240525-rpam2afh97

  • MD5

    723f46d7354ada6c17f2dccd6b4fd3cd

  • SHA1

    e4dadc29528e43e552321b8d1d9e7669dbdfe232

  • SHA256

    c49c52a26a42a7b70e0c1b4e0679e5c9c0778a3ebecd3d9c98c9b69bfc08e939

  • SHA512

    a5a09104d170807f42e210e62466928c355d406cf255e571ce7f5788f7a75c8871fa383f5bed4680afb7d376e728c7afd21f9bfe1d0f295498d203c22af5b008

  • SSDEEP

    6144:Sn7sMYod+X3oI+YGVsjVqksMYod+X3oI+YGVsjVdsMYod+X3oI+YGVsjVP:MP5d+X3zjVqy5d+X3zjVp5d+X3zjVP

Malware Config

Targets

    • Target

      723f46d7354ada6c17f2dccd6b4fd3cd_JaffaCakes118

    • Size

      519KB

    • MD5

      723f46d7354ada6c17f2dccd6b4fd3cd

    • SHA1

      e4dadc29528e43e552321b8d1d9e7669dbdfe232

    • SHA256

      c49c52a26a42a7b70e0c1b4e0679e5c9c0778a3ebecd3d9c98c9b69bfc08e939

    • SHA512

      a5a09104d170807f42e210e62466928c355d406cf255e571ce7f5788f7a75c8871fa383f5bed4680afb7d376e728c7afd21f9bfe1d0f295498d203c22af5b008

    • SSDEEP

      6144:Sn7sMYod+X3oI+YGVsjVqksMYod+X3oI+YGVsjVdsMYod+X3oI+YGVsjVP:MP5d+X3zjVqy5d+X3zjVp5d+X3zjVP

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks